cros: Added policies for screen unlock.

components/policy/resources/policy_templates.json

Index: components/policy/resources/policy_templates.json
diff --git a/components/policy/resources/policy_templates.json b/components/policy/resources/policy_templates.json
index d6d58d7a62629c32bb596488dc6fbc157aadd3d5..9c5b622bb2f5956a81db74212d98bf196167c6a7 100644
--- a/components/policy/resources/policy_templates.json
+++ b/components/policy/resources/policy_templates.json
@@ -139,7 +139,7 @@
 #   persistent IDs for all fields (but not for groups!) are needed. These are
 #   specified by the 'id' keys of each policy. NEVER CHANGE EXISTING IDs,
 #   because doing so would break the deployed wire format!
-#   For your editing convenience: highest ID currently used: 349
+#   For your editing convenience: highest ID currently used: 351
 #
 # Placeholders:
 #   The following placeholder strings are automatically substituted:
@@ -9151,7 +9151,65 @@
       This policy has no effect on whether users can configure printers on
       individual devices.  It is intended to be supplementary to the
       configuration of printers by individual users.''',
-    }
+    },
+    {
+      'name': 'QuickUnlockModeWhitelist',
+      'type': 'list',
+      'schema': {
+        'type': 'array',

[pastarmovj, 2016/11/04 10:33:03]

Please consult the "ExtensionAllowedTypes" policy to see how to document the
possible values for a string enum.

Also in the description section write the possible values and what do they mean.
Also describe the default behavior when the policy is not set.

[sammiequon, 2016/11/06 17:52:52]

Done.

+        'items': { 'type': 'string' },
+      },
+      'supported_on': ['chrome_os:56-'],
+      'features': {
+        'dynamic_refresh': True,
+        'per_profile': True,
+      },
+      'example_value': ['PIN'],
+      'id': 351,
+      'caption': '''Enable methods for unlocking the lock screen.''',
+      'tags': [],
+      'desc': '''This policy sets which methods can be used to unlock the lock screen. All means all available methods can be used, otherwise only the specified chosen methods may be used.''',
+    },
+    {
+      'name': 'QuickUnlockTimeout',
+      'type': 'int-enum',
+      'schema': {
+        'type': 'integer',
+        'enum': [ 0, 1, 2, 3 ],
+      },
+      'items': [
+        {
+          'name': 'SixHours',
+          'value': 0,
+          'caption': '''Password entry is required every six hours.''',
+        },
+        {
+          'name': 'TweleveHours',
+          'value': 1,
+          'caption': '''Password entry is required every twelve hours.''',
+        },
+        {
+          'name': 'Day',
+          'value': 2,
+          'caption': '''Password entry is required every day (24 hours).''',
+        },
+        {
+          'name': 'Week',
+          'value': 3,
+          'caption': '''Password entry is required every week (168 hours).''',
+        },
+      ],
+      'supported_on': ['chrome_os:56-'],
+      'features': {
+        'dynamic_refresh': True,
+        'per_profile': True,
+      },
+      'example_value': 2,
+      'id': 352,
+      'caption': '''Sets how often user has to enter password to use quick unlock.''',
+      'tags': [],
+      'desc': '''Users have to enter their password into the lock screen every once in a while to continue using quick unlock. This policy sents the interval at which the lock screen will request the users password.''',

[pastarmovj, 2016/11/04 10:33:03]

Again document the default behavior here.

[battre, 2016/11/04 10:59:36]

This description is unclear to me. Let's say I pick 6 hours. Does that mean that
I have to enter the password (as opposed to quick unlock)
- if the Chromebook showed a lock screen for 6 hours? 
- if the last quick unlock has been 6 hours ago, but I used the Chromebook
during that time?
- if the last password has been entered 6 hours ago, but I used the Chromebook
during that time?

[sammiequon, 2016/11/06 17:52:52]

Done.

[sammiequon, 2016/11/06 17:52:52]

Done.

+    },
   ],
   'messages': {
     # Messages that are not associated to any policies.